Fix for gosec rule G304 - sanitize filepaths

pkg/yqlib/utils.go

@@ -5,6 +5,7 @@ import (
 	"container/list"
 	"io"
 	"os"
+	"path/filepath"
 
 	yaml "gopkg.in/yaml.v3"
 )
@@ -13,7 +14,7 @@ func readStream(filename string) (io.Reader, error) {
 	if filename == "-" {
 		return bufio.NewReader(os.Stdin), nil
 	} else {
-		return os.Open(filename) // nolint gosec
+		return os.Open(filepath.Clean(filename))
 	}
 }